$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa File: 07653354-62e0-4912-98f0-2c22354ec38a.roa (raw, json) Hash identifier: AAVE1U4F97lzPQP6FDQaFkO3tFwReKCln+HO3nN/2zY= Subject key identifier: 27:BC:89:CA:C1:2C:D5:04:B5:89:2D:B7:E5:59:63:9A:76:53:1A:63 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 022A6B9D7535C726EE3D27BB6E7C7626A1BCC0D3 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa Signing time: Fri 11 Jul 2025 15:00:30 +0000 ROA not before: Fri 11 Jul 2025 15:00:30 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2a:6b:9d:75:35:c7:26:ee:3d:27:bb:6e:7c:76:26:a1:bc:c0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jul 11 15:00:30 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=63625bc2b927da5d90fc439e1353bba155433b9d102b9aada2046d717fd07f49, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:f1:e2:0c:7f:26:a0:6e:db:8c:e5:fa:24: cf:c1:bb:3b:94:45:05:69:51:99:b8:32:0c:e8:b5: d2:17:89:98:75:c6:7a:18:72:26:63:ef:a4:a2:2c: b8:79:c4:73:57:1e:7e:5d:04:d6:eb:c9:a2:93:79: 7f:6a:65:c6:85:73:f1:ef:93:52:1c:d8:cf:09:d9: 8a:f4:2c:fa:b4:70:2d:48:93:a6:2f:a3:6c:23:97: 6c:d5:0a:8d:f8:06:73:f6:8d:ab:ca:09:db:f5:38: 38:e1:eb:99:8b:a3:37:e6:d8:86:f9:89:0e:b1:a7: 66:53:27:af:c4:8f:00:97:1e:b0:21:94:4f:2d:8e: fb:dd:5f:56:e5:58:90:98:c0:c4:a6:46:e9:11:f3: 87:4b:8c:99:96:38:6e:a3:31:57:5e:82:9c:bb:90: 42:54:c7:40:a1:66:50:99:da:5d:ce:6b:c9:37:d9: 53:91:ba:e8:c7:4c:0c:0b:19:ca:50:71:ec:bc:0d: dd:74:d8:46:50:62:e4:9c:10:ee:fc:fb:3c:45:c7: 67:59:98:c2:4c:60:05:0b:3f:35:5b:9f:28:4f:54: 36:14:fe:9d:07:5a:b2:0e:57:95:95:7a:76:72:37: d9:8a:7c:4d:de:38:56:2b:2d:e5:a6:1e:fb:61:8d: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:89:CA:C1:2C:D5:04:B5:89:2D:B7:E5:59:63:9A:76:53:1A:63 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.32.0/19 Signature Algorithm: sha256WithRSAEncryption 26:88:7f:f4:d0:c3:51:37:d7:3e:88:d4:14:0e:3f:c8:27:46: f2:c4:59:91:7c:25:89:33:47:94:09:19:60:d9:b6:62:3d:ce: 5a:6b:c0:80:9c:83:28:ed:a9:df:21:55:3b:87:ca:41:48:e6: 43:bb:d5:6e:b2:b5:d3:06:5d:a6:91:f3:1a:98:15:cc:72:f5: 35:d6:ed:ce:ae:9a:19:04:65:11:08:bb:e9:c3:bd:55:98:bc: f8:ba:63:7d:5a:41:64:56:3b:53:ef:81:5c:54:f1:7e:60:40: 4f:bc:f4:ce:1e:0e:20:54:07:49:1a:f4:d6:bb:55:da:42:c9: a1:c8:f5:cf:81:9f:05:25:57:f9:28:ec:3f:5d:6c:99:0c:e7: 60:58:b3:96:4b:5d:03:5f:18:9c:f6:20:ff:ab:fc:16:6b:c5: a2:b5:d7:02:93:db:ca:1e:15:81:16:57:7b:dc:9f:7f:e4:d4: fa:5e:dd:8f:b5:6d:fa:5a:3b:8d:2e:55:5d:1d:0f:20:e5:0b: 4a:e6:51:36:63:03:c6:90:e8:33:e9:a8:da:7a:72:3f:f8:62: 88:a3:41:c7:8d:61:85:15:37:00:71:bb:03:82:36:91:b8:7c: ab:a0:3c:8c:3f:62:d5:23:96:35:cb:19:c9:a9:f2:06:f2:16: 04:a2:38:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAiprnXU1xybuPSe7bnx2JqG8wNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNzExMTUwMDMwWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzYyNWJjMmI5MjdkYTVkOTBmYzQzOWUxMzUzYmJhMTU1 NDMzYjlkMTAyYjlhYWRhMjA0NmQ3MTdmZDA3ZjQ5MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZIfHiDH8moG7bjOX6JM/BuzuURQVpUZm4MgzotdIXiZh1 xnoYciZj76SiLLh5xHNXHn5dBNbryaKTeX9qZcaFc/Hvk1Ic2M8J2Yr0LPq0cC1I k6Yvo2wjl2zVCo34BnP2javKCdv1ODjh65mLozfm2Ib5iQ6xp2ZTJ6/EjwCXHrAh lE8tjvvdX1blWJCYwMSmRukR84dLjJmWOG6jMVdegpy7kEJUx0ChZlCZ2l3Oa8k3 2VORuujHTAwLGcpQcey8Dd102EZQYuScEO78+zxFx2dZmMJMYAULPzVbnyhPVDYU /p0HWrIOV5WVenZyN9mKfE3eOFYrLeWmHvthjSaxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ7yJysEs1QS1iS235VljmnZTGmMwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzA3NjUzMzU0LTYyZTAtNDkxMi05OGYwLTJjMjIzNTRlYzM4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVgfyAwDQYJKoZIhvcNAQELBQADggEBACaIf/TQw1E31z6I1BQOP8gnRvLE WZF8JYkzR5QJGWDZtmI9zlprwICcgyjtqd8hVTuHykFI5kO71W6ytdMGXaaR8xqY Fcxy9TXW7c6umhkEZREIu+nDvVWYvPi6Y31aQWRWO1PvgVxU8X5gQE+89M4eDiBU B0ka9Na7VdpCyaHI9c+BnwUlV/ko7D9dbJkM52BYs5ZLXQNfGJz2IP+r/BZrxaK1 1wKT28oeFYEWV3vcn3/k1Ppe3Y+1bfpaO40uVV0dDyDlC0rmUTZjA8aQ6DPpqNp6 cj/4YoijQceNYYUVNwBxuwOCNpG4fKugPIw/YtUjljXLGcmp8gbyFgSiOCo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:54:42 2025 by rpki-client